Use the new param-default-setting ability, to simplify the magic
surrounding the privsep user/group setting code.

Fixes #1243